Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
File: 34352e3138342e36382e302f32322d3232203d3e20323639333539.roa (raw, json)
Hash identifier: geccwQtiPHpVy5EkAOF/e5YYdxfBsxVkGMgK0gRCazo=
Subject key identifier: 02:4A:F0:27:30:B3:E1:D4:BD:A9:A9:E9:7B:C6:FE:FC:64:44:AB:0A
Certificate issuer: /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial: 7B63092880607946AE4159CF5C7845BB1A5538BE
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
Signing time: Mon 24 Apr 2023 14:54:35 +0000
ROA not before: Mon 24 Apr 2023 14:49:35 +0000
ROA not after: Mon 22 Apr 2024 14:54:35 +0000
asID: 269359
IP address blocks: 45.184.68.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:63:09:28:80:60:79:46:ae:41:59:cf:5c:78:45:bb:1a:55:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Validity
Not Before: Apr 24 14:49:35 2023 GMT
Not After : Apr 22 14:54:35 2024 GMT
Subject: CN=024AF02730B3E1D4BDA9A9E97BC6FEFC6444AB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:a0:c3:3d:47:f9:c8:cd:f7:f3:67:92:ec:
4e:3c:12:27:5c:55:0f:2f:04:31:3a:1e:56:cc:4e:
70:7d:21:7f:62:d4:3d:61:5c:00:96:ce:dd:3f:d1:
54:3a:e1:54:bc:be:7f:b8:0f:76:25:4a:88:9a:a3:
a2:9f:c7:7d:bb:03:18:68:c0:40:01:80:4a:ff:7c:
c1:11:6e:43:e6:5e:d6:1b:53:07:12:a2:cd:8c:ea:
9b:a8:dd:c0:f7:dd:b6:78:73:8d:98:23:34:df:96:
e2:23:57:18:b2:ab:66:06:c6:1a:04:91:48:43:f5:
a1:39:32:ae:54:93:07:eb:61:51:18:48:0a:ac:a4:
09:94:cc:ea:6d:58:80:a2:b9:02:31:02:32:a7:14:
95:0e:66:51:12:e3:a4:a1:aa:03:0a:d4:9b:30:c8:
61:97:e4:b5:33:d7:5b:55:78:ff:8f:35:4c:06:8f:
da:21:d8:a7:f2:94:7e:07:e9:48:8c:dc:a5:5a:61:
cf:58:3b:ea:d8:3e:da:31:71:b7:37:13:fe:c7:ed:
9e:bb:37:f4:b1:e5:3f:44:29:12:a2:db:8c:39:f8:
37:f7:2e:15:fc:2a:d1:9f:67:37:af:ab:e6:fb:09:
2d:b4:70:dd:04:81:85:a4:8d:b5:39:56:34:f7:d9:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:F0:27:30:B3:E1:D4:BD:A9:A9:E9:7B:C6:FE:FC:64:44:AB:0A
X509v3 Authority Key Identifier:
keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f2:af:08:b9:3b:f8:3f:34:6f:7f:e4:6a:87:80:69:da:61:
63:1a:88:a3:7a:fd:7b:4e:17:b9:23:d5:eb:0b:e4:8e:cf:3e:
f7:e4:49:8f:25:d6:9e:01:df:d2:3f:6b:dd:f3:66:14:bc:5a:
55:26:60:48:55:97:cd:ba:db:ee:ed:09:47:a1:33:c3:aa:10:
2f:68:c4:16:4d:6e:22:8a:28:c3:3e:55:ca:13:e2:31:78:ca:
9d:0a:04:3e:e6:63:79:f6:9f:e2:0d:4f:c9:15:eb:34:01:96:
3e:20:d2:c5:e9:8b:d3:b0:22:66:e4:85:92:9f:e6:a3:a8:60:
82:01:0a:4a:b6:46:2c:e6:87:2a:a0:3a:52:2a:4c:bf:6f:3c:
cb:29:29:39:05:67:bb:e8:0a:23:c4:cc:63:31:9e:a5:17:ed:
0f:45:79:cb:6c:52:b1:59:f6:59:60:4d:91:e0:6a:fa:c3:7e:
d1:5d:8e:98:da:93:05:5e:11:4f:12:0e:f4:80:88:70:45:fd:
9a:3c:56:25:85:f9:fd:11:6a:cd:a3:92:01:66:a9:e4:2b:d9:
e0:ff:c8:b9:7c:b3:2a:43:3e:da:b2:e4:2f:47:e4:59:1c:13:
83:80:dd:07:df:b2:da:66:8a:0a:72:57:7a:34:51:06:75:7b:
fc:7f:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 14:50:50 2024 by rpki-client on console-ams.rpki-client.org